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In the Claims : 

Claims 1-25 (Canceled). 

26. (Currently Amended) A system for providing continuous authentication of a 
user of a computing device, comprising: 

a security component which provides security functions, such that the security 
component can vouch for authenticity of one or more other components with which it is 
securely operably connected; 

a biometric sensor component that is securely operably connected, as one of the one 
or more other components, to the security component; 

securely-stored biometric information which identifies an owner of the computing 

device; 

means for repeatedly obtaining, from the biometric sensor component, biometric input 
of a user of the computing device, wherein the means for repeatedly obtaining is activated 
upon beginning a security- sensitive operation and is terminated upon completion of the 
security-sensitive operation; 

means for comparing the repeatedly obtained biometric input to the securely-stored 
biometric information of the owner, wherein each of the comparisons comprises an 
authentication of the user; and Th e system according to Claim 25, wherein th e 

means for concludin g, within a security core, that the security-sensitive operation is 
authentic also r e quir e s that based on all other components which are securely operably 
connected to the security core remain remaining securely operably connected until 
completion of the security-sensitive operation. 

27. (Currently amended) A system for providing continuous authentication of a 
user of a computing device, comprising: 

a security component which provides security functions, such that the security 
component can vouch for authenticity of one or more other components with which it is 
securely operably connected; 

a biometric sensor component that is securely operably connected, as one of the one 
or more other components, to the security component; 
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securely-stored biometric information which identifies an owner of the computing 

device; 

means for repeatedly obtaining, from the biometric sensor component, biometric input 
of a user of the computing device, wherein the means for repeatedly obtaining is activated 
upon beginning a security-sensitive operation and is terminated upon completion of the 
security-sensitive operation; 

means for comparing the repeatedly obtained biometric input to the securely-stored 
biometric information of the owner, wherein each of the comparisons comprises an 
authentication of the user; and Th e system according to Claim 25, wherein th e 

means for concludin g, within a security core, that the security-sensitive operation is 
authentic also requires that based on all other components which are securely operably 
connected to the security core and which are involved in the security-sensitive operation 
r e main remaining securely operably connected until completion thereof of the security- 
sensitive operation . 

Claims 28-59 (Canceled). 

60. (Currently amended) A method for providing continuous authentication of a 
user of a computing device, comprising: 

operating a security component which provides security functions, such that the 
security component can vouch for authenticity of one or more other components with which 
it is securely operably connected; 

providing a biometric sensor component that is securely operably connected, as one of 
the one or more other components, to the security component; 

providing securely-stored biometric information which identifies an owner of the 
computing device; 

repeatedly obtaining, from the biometric sensor component, biometric input of a user 
of the computing device, wherein the repeatedly obtaining is activated upon beginning a 
security-sensitive operation and is terminated upon completion of the security-sensitive 
operation; 
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comparing the repeatedly obtained biometric input to the securely-stored biometric 
information of the owner, wherein each of the comparisons comprises an authentication of 
the user; and Th e m e thod according to Claim 59, wher e in th e step of 

concludin g with a security core that the security-sensitive operation is authentic else 
r e quires that based on all other components which are securely operably connected to the 
security core r e main remaining securely operably connected until completion of the security- 
sensitive operation. 

6 1 . (Currently amended) A method for providing continuous authentication of a 
user of a computing device, comprising: 

operating a security component which provides security functions, such that the 
security component can vouch for authenticity of one or more other components with which 
it is securely operably connected; 

providing a biometric sensor component that is securely operably connected, as one of 
the one or more other components, to the security component; 

providing securely-stored biometric information which identifies an owner of the 
computing device; 

repeatedly obtaining, from the biometric sensor component, biometric input of a user 
of the computing device, wherein the repeatedly obtaining is activated upon beginning a 
security-sensitive operation and is terminated upon completion of the security-sensitive 
operation; 

comparing the repeatedly obtained biometric input to the securely-stored biometric 
information of the owner, wherein each of the comparisons comprises an authentication of 
the user; and Th e m e thod according to Claim 59, wh e r e in th e step of 

concludin g within a security core that the security-sensitive operation is authentic alse 
r e quires that based on all other components which are securely operably connected to the 
security core and which are involved in the security-sensitive operation r e main remaining 
securely operably connected until completion thereof 



Claims 62-93 (Canceled). 
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94. (Currently amended) A computer program product for providing continuous 
authentication of a user of a computing device, the computer program product embodied on 
one or more computer-readable media and comprising: 

computer-readable program code that is configured to operate a security component 
which provides security functions, such that the security component can vouch for 
authenticity of one or more other components with which it is securely operably connected; 

computer-readable program code that is configured to access a biometric sensor 
component that is securely operably connected, as one of the one or more other components, 
to the security component; 

computer-readable program code that is configured to access securely-stored 
biometric information which identifies an owner of the computing device; 

computer-readable program code that is configured to repeatedly obtain, from the 
biometric sensor component, biometric input of a user of the computing device, and to be 
activated upon beginning a security-sensitive operation and terminated upon completion of 
the security-sensitive operation; 

computer-readable program code that is configured to compare the repeatedly 
obtained biometric input to the securely-stored biometric information of the owner, wherein 
each of the comparisons comprises an authentication of the user; and The computer program 
product according to Claim 93, wh e r e in th e 

computer-readable program code m e ans for concluding that is configured to conclude 
within a security core that the security-sensitive operation is authentic al s o r e quires that based 
on all other components which are securely operably connected to the security core r e main 
remaining securely operably connected until completion of the security-sensitive operation. 

95. (Currently amended) A computer program product for providing continuous 
authentication of a user of a computing device, the computer program product embodied on 
one or more computer-readable media and comprising: 

computer-readable program code that is configured to operate a security component 
which provides security functions, such that the security component can vouch for 
authenticity of one or more other components with which it is securely operably connected; 
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computer-readable program code that is configured to access a biometric sensor 
component that is securely operably connected, as one of the one or more other components, 
to the security component; 

computer-readable program code that is configured to access securely-stored 
biometric information which identifies an owner of the computing device; 

computer-readable program code that is configured to repeatedly obtain, from the 
biometric sensor component, biometric input of a user of the computing device, and to be 
activated upon beginning a security-sensitive operation and terminated upon completion of 
the security-sensitive operation; 

computer-readable program code that is configured to compare the repeatedly 
obtained biometric input to the securely-stored biometric information of the owner, wherein 
each of the comparisons comprises an authentication of the user; and Th e comput e r program 
product according to Claim 93, wherein the 

computer-readable program code m e ans for concluding that is configured to conclude 
within a security core that the security-sensitive operation is authentic al s o r e quir es that based 
on all other components which are securely operably connected to the security core and 
which are involved in the security-sensitive operation remain remaining securely operably 
connected until completion thereof. 

( 

Claims 96-1 02 (Canceled). 

103. (Currently amended) A method of doing business by continually 
authenticating a user of a computing device, comprising stops of : 

operating a security component for the computing device, wherein the security 
component provides security functions such that the security component can vouch for 
authenticity of one or more other components with which it is securely operably connected; 

providing a biometric sensor component that is securely operably connected, as one of 
the one or more other components, to the security component; 

providing securely-stored biometric information which identifies an owner of the 
computing device; 

performing a security-sensitive operation using the computing device; 
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repeatedly obtaining, from the biometric sensor component, biometric input of a user 
of the computing device over a duration of the security-sensitive operation; 

comparing the repeatedly obtained biometric input to the securely-stored biometric 
information of the owner, wherein each of the comparisons comprises an authentication of 
the user; 

determining within a security core that the security-sensitive operation is authentic 
based on all other components which are securely operably connected to the security core and 
which are involved in the security-sensitive operation remaining securely operably connected 
until completion of the security-sensitive operation; and 

aborting the security-sensitive operation if the comparing step fails at any time over 
the duration of the security-sensitive operation or if the security-sensitive operation is 
determined not to be authentic . ^ 

. 1 04. (Currently amended) A method of improving security of a computing device, 
comprising steps of : 

operating a security component for the computing device, wherein the security 
component provides security functions such that the security component can vouch for 
authenticity of one or more other components with which it is securely operably connected; 

providing a biometric sensor component that is securely operably connected, as one of 
the one or more other components, to the security component; 

providing securely- stored biometric information which identifies an owner of the 
computing device; 

repeatedly obtaining, from the biometric sensor component, biometric input of a user 
of the computing device; and 

comparing the repeatedly obtained biometric input to the securely-stored biometric 
information of the owner; 

performing a security-sensitive operation using the computing device; and 

determining within a security core that the security-sensitive operation is authentic 
based on all other components which are securely operably connected to the security core and 
which are involved in the security-sensitive operation remaining securely operably connected 
until completion of the security-sensitive operation . 
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105. (Currently amended) A method of improving security of operations carried out 
with a computing device, comprising steps of : 

operating a security component for the computing device, wherein the security 
component provides security functions such that the security component can vouch for 
authenticity of one or more other components with which it is securely operably connected; 

providing a biometric sensor component that is securely operably connected, as one of 
the one or more other components, to the security component; 

providing securely-stored biometric information which identifies an owner of the 
computing device; 

performing a security-sensitive operation using the computing device; 

repeatedly obtaining, from the biometric sensor component, biometric input of a user 
of the computing device over a duration of the security-sensitive operation; 

comparing the repeatedly obtained biometric input to the securely-stored biometric 
information of the owner, wherein each of the comparisons comprises an authentication of 
the user; and 

determining within a security core that the security- sensitive operation is authentic 
based on all other components which are securely operably connected to the security core and 
which are involved in the security-sensitive operation remaining securely operably connected 
until completion of the security-sensitive operation 

aborting th e s e curity s e nsitiv e op e ration if the comparing st e p fails at any time ov e r 

th e duration of the s e curity s e nsitive op e ration . 



